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Operations 


DOD 

ETAPWG 


Product 

Development 


'\  rrt 


Awareness 

Program 


Product 

Distribution 


DOD  Mission  &  Functions 


Vital  link  in  securing  the 


information  infrastructure 


.  Support  ASD/C3I 

•  Facilitate  development  of  standardized  DOD-wide 
INFOSEC  training 

•  Develop  products  for  use  in  a  comprehensive  DOD 
INFOSEC  awareness  program 

•  Promote  training  &  awareness  products  for  use 
DOD-wide 

•  Promote  development  of  curriculum  to  support  an 
INFOSEC  career  field/professional  program 

•  Influence  national-level  INFOSEC  education, 
training  and  awareness 


VZfENsj, 


Federal  Forums 


Navy 


OSD 


Customers 

Who  they  are 


Army 


Joint  Staff 


CINCs 


Marine  Corps 


DISA  IPMO  [  DOD  Agencies 


Air  Force 


NATO 


NIST 


DISA 


Federal  Agencies 


DOD  F©ru  ns 


Approach 


Champion  products 


Resource 
Promote 
Produce 


Leverage  INFOSEC  ETAP  forums 


DOD  (Dll) 

Federal/National  (Nil) 
International  (Gil) 


Rely  on  existing  ETAP  infrastructure 


CINCs 

Services 
Agencies 


Key  Working  Groups  &  Forums 

Classified  Community 

.  Security  Policy  Forum 

.  Training  and  Professional  Development  Committee  (TPDC) 

.  INFOSEC  Working  Group  (ISSWG)  (IPMO  chairs) 

.  NSTISSC 

•  INFOSEC  Education,  Training  and  Awareness  Issue  Group 
.  MISSI  Life  Cycle  Logistics  Working  Group 

Unclassified  Community 

.  NIST  Computer  Security  Program  Managers  Forum 

.  Federal  Information  Systems  Security  Educators  Association 
(FISSEA) 

•  Association  of  Computing  Machinery  (ACM)(via  NPS) 

•  National  Colloquium  for  INFOSEC  Education 

•  Army  C2  Protect  Training  Working  Group 


POD  I A  ETAPWG:  Overview 

Education,  Training,  Awareness  and 
Professionalization  Working  Group 

ETAPWG  Charter  under  ASD/C3I  Information  Assurance  Group  (IAG) 

Address  IA/INFOSEC  ETA  issues  on  behalf  of  ASD/C3I 

CINC,  Service  and  Agency  membership 

•  ETA  providers 
.  ETA  program  managers 

Purpose  is  to: 

.  Identify  gaps  in  instruction 
.  Recommend/develop  solutions 

•  Determine  champions  for  initiatives 

•  Eliminate  duplication  of  effort 
.  Standardize  what  is  being  taught 


INFOSEC  Training  Facility  (l"FF) 

DODIAETA@ncr.  disa.  mil 


•  Provides  capability  for  delivering  INFOSEC  courseware  in  NCR 
•  2  computer  classrooms  (1  PC;  1PC  &  UNIX) 


.  Validate  content  and  pilot/evaluate  courseware 

.  Supports  non-IPMO  developed  courses 

.  Operational  Computer  Security  (ND225)(NSA) 

•  INFOSEC  Basics  (ISSB)(formerly  DODSI) 

.  Dll  COE  (DISA) 

.  ARMS  (DISA) 


Falls  Church  VA 


.  Available  to  DOD  and  others 

•  User  provides  instructor;  ITF  provides  support  @  no  cost 

•  Army  requesting  use  as  2nd  site  for  System  Admin  training 
.  Navy  using  for  training  in  NCR 

•  INFOSEC  training  to  DISA/GOSC  reservists  on  weekends 


ETA  Products: 
Current 
and 

On  ths  —orizon 


INFOS  EC  Post  Graduate  Education 

.  Joint  IPMO/Navy/Navy  Postgraduate  School  (NPS)  initiative 

.  Goal:  Infuse  INFOSEC  into  appropriate  curriculums  at  DOD  degree 
granting  institution 

.  NPS  is  joint  institution:  CINCs,  Services,  Agencies 

.  NPS  lead  development  w/IPMO 

.  Introduction  to  Computer  Security  (completed) 

.  Management  of  Security  in  Information  Systems  (current) 

.  Secure  Systems  (planned) 

.  Network  Security  (planned) 

.  NPS  taking  lead  to  transfer  course  materials  to  DOD  and  private 
sector  academic  institutions 

.  ACM  (Association  for  Computing  Machinery) 

.  Other  academic  forums 


_ INFOSEC  Courseware 

IPMO  sponsored:  no  cost/low  cost 


Computer  Based  Training  ( Unclassified \  DOS  based  286) 

.  DOD  CS  100:  Introduction  to  Computer  Systems  Security 

.  Targets  unclassified  environment  (DOD  version  of  NSA  IN-170) 
.  8  hours 

Platform  Instruction  (ITF  or  MTT) 

.  INFOSEC  101:  INFOSEC  for  End  Users  (1  day) 

.  INFOSEC  300:  INFOSEC  for  ISSMs  &  ISSOs  (5  days) 

.  INFOSEC  315:  DITSCAP  (2  days) 

.  INFOSEC  310  Windows  NT  Security  for  SAs  (5  days) 

Training  Materials  (Po  werPoint) 

.  INFOSEC  201 :  INFOSEC  for  Managers  (web  only) 

.  INFOSEC  205:  Malicious  Logic  (web  only) 


Available  at  no  cost  via  WWW  or  from  DISA/IPMO  upon  request 


DOD  Information  Technology  Security 
Certification  &  Accreditation  Process 

IPMO  role  DITSCAP 

.  Develop  DOD  level  modules;  validate  DOD-wide 
.  Front  end  for  Service/Agency  detailed  training 
Awareness/literacy  level 
.  Overview  of  DITSCAP  (.25  day) 


.  initial  Effort  Required 
.  Long  Term  Benefits 

.  DITSCAP  Task  &  Step  Review  (1 .75  day) 

.  Review  DITSCAP  process  by  phase 
.  DITSCAP  templates  &  “boilerplate” 

.  Identify  places  to  go  for  additional  assistance 


.  Audience 

.  Primary  :  ISSO,  Mid-Management 
.  Secondary: 

•  Sr  Management 

@Personnel  w /  C&A  as  part  of  their  job 
.  Delivery 

.  Platform  (available  @  ITF) 

.  Train-the-Trainer  (w/Services/agencies) 

.  Convert  to  interactive  multimedia  CBT  (3  QTR  FY98) 


INFOSEC  Courseware 

On  the  Horizon 

IPMO:  Designated  Approving  Authority  (DAA) 

.  Based  on  GSA  and  DODSI  materials 
.  Updating  course;  adding  practical  exercise 
.  Prepare  classroom  course  (3rd  QTR  FY98) 

.  Convert  to  CBT  (4th  QTR  FY98) 

IPMO:  Information  Assurance  for  Auditors  and  Evaluators  (w/DODIG) 

.  DODIG  lead  for  military  IGs 

.  DODIG  leading  coordination  to  transition  to  Federal-wide  IG  audience 
.  Pilot  held  3-4  March  98  @  ITF 
•  .ConverttoCBT(3rdQTRFY98) 

Defense  Acquisition  University  (DAU):lnformation  Resource 
Management  (IRM)  101 

.  INFOSEC  inputs  provided  to  DAU  for  web  based  course 
.  POC:  Norline  Depeiza  (depeizn@acq.osd.mil) 

.  Web  site:  http://1 92.239.92.37/IRM101_project_web/welcome.html 


Public  Key  Infrastructure 

PKl 


.  IPMO  role 

.  Develop  DOD  level  modules;  validate  DOD-wide 
.  Front  end  for  Service/Agency  detailed  training 

.  Audience 
.  Users 

.  Local  Registration  Authorities  (LRAs) 

.  Registration  Authorities 

.  Initially  in  conjunction  with  Defense  Travel  Service  (DTS) 
•  Piggy-back  on  DTS  training  strategy 

.  Delivery  medium 

.  Awareness  Video:  June  98 
.  Platform  course:  July  98  (pilot) 

.  Train  the  trainer  program 

.  Convert  to  interactive  multimedia  CBT  (4  QTR  FY98) 


Training 

(Doing) 


Literacy 

(Understanding) 


Awareness 

(Recognition) 


Windows  NT  Security  for  System 
Administrators  (INFOSEC  310) 


.  Drawn  from  Army  and  Navy  Systems  Administrator  courses 
.  Army,  5th  SIG  CMD:  5  days 

.  Navy,  CNET,  Corry  Station:  8  weeks  (Multi-platform) 

.  DISA/IPMO  course:  Windows  NT,  5  days 

.  Roles  &  responsibilities,  policies  &  procedures  (.5  days) 
.  Operating  system  security  overview  (4.5  days) 

.  Threats  and  vulnerabilities 
.  Countermeasures 

.  Tools/firewall  lab  planned  for  future  (FY99) 


.  Schedule:  1-2  classes/month  for  remainder  of  FY98 


Current  INFOSEC  Courses 


*  For  ITF  courses,  go  to  :  http://www.disa.mil/ciss/cissitf 

**  For  info  on  source  ratings  &  prerequisites  go  to:  http:/www.cnet.navy.mil/netpdtc/cantrac/cantrac.htm 


Sys  Admin  &  Network 
Security  (Army)(2QTR 
FY98) 


DAA  (GSA/DODSI) 
(Navy)(IPMO)(4  QTR 
FY98) 

Windows  NT  Security 
for  Sys  Admin 
(INFOSEC  310)  (IPMO) 
(2  QTR  FY98) 
Advanced  Network 
Analyst  (CNET) 

(4thQtr  FY98) 

ISSM  (CNET)  (Pilot,  2 

QTR  FY98) 

DITSCAP  (DOD) 


(IPMO)(2  QTR  FY98) 


INFOSEC  Courses  on  the  Horizon 
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1NF0SEC  CBTs  &  Videos 

IPMO  championed/community  validated 

.  Computer  Based  Training  (Unclassified;  DOS-based  286) 

.  ND-170:  Introduction  to  Computer  System  Security  (NSA) 

.  Targets  Classified  environment  (basis  for  DOD  CS-100) 

.  ND-150:  Introduction  to  Information  Systems  Security  (NSA) 

.  OP-301 :  OPSEC  Fundamentals  for  Managers  and  Supervisors  (NSA) 

.  Videos  (VHS,  Unclassified) 

.  Networks  at  Risk  (NCS)  (10  min) 

•  Protect  Your  AIS  (USGov)  (6  vignettes) 

.  The  Information  Front  Line  (1C)  (10  min) 

.  Bringing  Down  the  House  (1C)  (1 1  min) 

.  Exploring  MISSI  (IPMO  w/NSA)(  10  min) 

.  Computer  Security  101  (DOJ)  (~10  min) 

.  Computer  Security:  The  Executive  Role  (DOJ)(~10min) 

.  Protect  Your  AIS  (FAA  Version)(48  min) 


Current 


INFOSEC  Multimedia  Products 

CD-ROM  Format 


.  INFOSEC  Awareness  (Unclassified,  Windows,  486) 

.  DISA  specific/DOD  useable 
.  Fulfills  Public  Law  100-235  requirements 
.  IW  Basics 

.  DOD  INFOSEC  Awareness 


On  the  Horizon 

.  Federal  INFOSEC  Awareness  (w/TPDC,  NSTISSC  ETA  Issue 
Group) 

.  Operational  Information  Systems  Security  (OISS)(2  vol)(WC) 


*WC  -  web  connected 


Videos 

Current 


INFOSEC  Awareness  Products 

Training  Resources  Electronic  Catalog  (TREC) 


Multi-disciplinary:  INFOSEC  &  related  disciplines 

•  IW  •  Physical  Security  .  OPS  EC 

•  C2W  •  Info  Assurance  .  COMSEC 

.  EW  •  Info  Protect  .  COMPUSEC 

.  PSYSOPS  •  Info  Operations  .  TEMPEST 

Centralized  source  of  security  ETA  “products” 

.  Government  owned/sponsored 
.  Courses,  CBTs,  Training  aids,  Posters 

Shared  responsibility: 

.  IPMO  manages  configuration/dissemination 
.  Providers/developers  “own”  their  data;  provide  updates 

Cooperative  effort  w/CINCs/Services/Agencies  &  Federal  Depts  &  Agencies 

.  Promoted  at  national  level  as  Federal  solution 
.  Interim  version  (Access)  available  via  DISA  v  web  site 

Transitioning  to  Web  based  product  ( 2nd  QTR  FY98) 

.  Search  and  sort  capabilities  using  browser 
.  Hot  links  to  provider  web  sites  for  registration 
.  Provider  update  on  web 


INFOSEC  Awareness  Products 


DOD’s  INFOSEC  newsletter 

Unclassified 

Availability 


DlSSPatch 


.  ASSIST  BBS 

.  Web  sites  (DISA,  NSA/SIPRNET) 

.  Paper  copies  (8000+  issues  distributed) 
DOD  &  Federal  wide 
Content 
.  Focus  article 

.  Resources  (products  &  courses) 

.  Events  (conferences/symposia) 

.  Where  to  get  more  information 
.  Service  /Product  POCs 


Training  Delivery 
to  the 
Desktop 


4V**v*£ 

it)  _ 


*  V 


Developing  Interactive  Multimedia 
_ Training  &  Awareness  Products 

Systematic  approach  to  efficiently  provide  high  quality 

ETA 


products  at  reasonable  cost 

.  Apply  National  Institute  for  Standards  and  Technology  (NIST)  ETA 
levels 

•  Map  course  content;  identify  applicability  to  each  level 

•  Build  modular;  --  “plug  &  play” 

•  Focus  on  delivery  to  the  desktop 

.  Computer-based  training  (CBT) 

.  Network-based,  Web-updateable  (Connected  CD-ROM) 

•  Integrate  CBT  with  classroom  instruction;  payoff  in 

.  Reduced  time  in  class,  or 

.  Additional  topics  covered/hands  on  provided,  and 
.  Post  -  refresher/reinforcement 

•  Ensure  all  courseware  is 

.  Free  of  copyright  restriction 
.  Government  owned 
.  Available  at  no  cost  to  DOD 


Training  Delivery  to  the  Desktop 

" Connected ”  CD-ROM 

.  Full  interactive,  multimedia  functionality  on  CD-ROM 

•  Run  on  network  (intranet)  or  individual  workstations  w/CD- 
ROM  readers 

.  Linked  to  web  site  for  updates  to  training  content  (text  files) 

•  Numerous  features: 

•  Metrics  collection 
.  Testing 

•  Book  marking 

.  “Closed  caption” 


Training  Delivery  to  the  Desktop 

Advantages/Disadvantages 

Advantages 

.  Standard  course  content  and  delivery 

.  Reduce  time  in  classroom  OR  Reallocate  time  in  classroom  to 
.  Add  new  topics 
.  Increase  hands  on  portion 
.  Use  web-site  to  provide  updates  to  training  content 
.  Reduce  need  to  conduct  refresher  training  in  classroom  setting 
.  Lower  cost 

Disadvantages 

.  No  direct,  immediate  interaction  with  instructor.. ..but  can 

.  Reduce  need  by  using  prerequisites  to  bring  students  to  desired  level 
.  Web  based  “Ask  the  Professor” 

.  Identity  of  student  taking  the  course... 

.  No  different  than  correspondence  course 
.  Use  existing  infrastructure 


Developing  Interactive  Multimedia 
Training  &  Awareness  Products 

Deliverable  to  the  desktop-- 
via  CD-ROM  reader  or  network...  &  web  updateable 


Example:  INFOSEC  Awareness  CD-ROM 


Cost 

CD-ROM 

Notes 

Cost  to  develop  CD-ROM  master 

Number  disseminated 

8647 

Number  does  not  include  DISA 
personnel  who  have  accessed  the 
presentation  via  the  DISANET 

Cost  to  produce  8647  CD-ROMs  @ 
$1.85  each 

$16,000.00 

Actual  cost  after  the  first  3500  is 
$1 .58  each 

Total  cost  to  develop  &  produce 

Cost  per  student 

Malicious 


Evolutio: 


Information 


Classified 

Unclassified 


DOD  INFOSEC  Awareness 


r  INFOSEC  lech  Asst. 
-  Your  ISSO/ISSM 
■  INFOSEC  Training 
"  INFOSEC  Awareness 
Products 


/Course  Content  Map 


Why 

Information 


Systems 

Security 


Definition 


Trojan  Horses 


Global 

Connectivity 


INFOSEC 


Worms 

Viruses 


Obser^e<i 


OMB  Circular 
DOD  Directive 
ITRM 


Common 


*When  user  criteria  are  finalized  acourse  test  will 


INFOWAR  Basics 

Course  Content  Map 


Global 

Connectivity 


Revoftittorr  in 
Military  Affairs 
(The  Old 
Situation,  The 
New  Situation) 


An  Actual 
Incident 
(Rome  Labs) 


POCs 


Exit 


Components 
of  INFOWAR 

The  Value  of 
Integration 

\  Information 
Superiority 

I  Deception 


_  Destruction 

(Lethal,  Non-Lethal) 

—  Info  Ops 

—  Electronic 
Warfare 
(Jamming) 


1 

DOD’s 

Responsibility 

l 

-1 

Command 

Responsibility 

Your  Role 

_  Security  — i 
Measures 


Computer  (Hanover  Hacker) 

—  Communications 

—  Physical 

—  Information 

—  Emanations 

—  Operations  (Pizza  Storm) 


27  March  1998 


iVENs 


Federal  INFOSEC  Awareness 


Course  Content  Map 


i  Menu 


HI 


Glossary 


4- 


Justice 
•  Treasury 
Commerce 
I*  House  of  Representatives 


J Boints  _(f  ^Health  &  Human  Resources 


Contact  pg^ion 


JML 


-L 


Operational  Information 
Systems  Security  (OISS),  Vol.1 

Course  Content  Map 


27  March  1998 


'  Workstation  Basics 
■General  Security 
•  Windows  NT 


Types  and  Handling 
Managing  Media 


Why  Risk  Management 
Risk  Management  Cycle 


27  March 


/P*****&' 


IA  for  Auditors  and  Evaluators 


Course  Map 


Windows  3. 1  version 

Installers  Course 


□ 

FI 


These  lessons  are  to 
be  taken  sequentially 
These  topics  are  to  be 
taken  sequentially 


Need  for  Sec. 

1 

Net.  Comm. 

MISSI&DMS 


Encryption 


Certificate  Authority  Workstation 
_ (CAW) 


Certification  Authority 
Workstation  (CAW) 


Course  Map 


— |  X.509  Certificate 


Fortezza  Cards 


Secure  Net. 
Comm. 


Forward 

Replay 

Back 

Main  Menu 


Show  Text 

Glossary 

Resources 

Course  Map 

Exit 

Information 
Assurance  Support 
Environ  ment  (IASE) 


Information  Assurance  Support 
_ Environment  (IASE) 

ASD/C3I  directed;  for  use  DOD-wide 

•  Web-based  DOD  Help  Environment  for  INFOSEC/ 

Information!  Assurance  professionals 


•  Functional  Areas 

•  ETA 

•  SABI/MLS 

•  DITSCAP 

•  Policy 

•  C&A/ST&E 

•  ITSC  Contract 

•  Tools 


j  ***A 


Person  to  receive  request/provide  information  requested 
Request  for  Information  Ticket  System 


•  Frequently  Asked  Questions  (FAQ) 

•  Solutions  Database 

•  Chat/Discussion  Rooms 

•  Whiteboard 

•  Mail  List 

.  Subscriptions 
.  By  Topic 

•  Bulletin  Board  System 

•  “Search  our  Site” 


.  Unclassified  Site: 

•  NIPRNet:  .mil  and  .gov  accounts  required 

•  URL:  http://mattche.iiie.disa.mil/ 

•  Information  Desk  Unclassified  E-Mail:  IASE@ncr.disa.mil 

•  IP  Address:  199.208.247.11 
.  Classified  Site: 

•  SIPRNet  accounts  required 

•  U  RL:  http://cassie.iiie.disa.smil.mil 

•  Information  Desk  Classified  (SIPRNet)  E-Mail: 
iase@iiie.  disa.smil.  mil 

.  Hours  of  Operation: 

•  Information  Desk:  M-F,  8-5 

•  IASE  Web  Site:  24  x  7 
.  Telephone:  703-681  -IASE 


SA  &  Ussr 
licensing 


Background 


♦  Series  of  high-level  reports  and  assessments  highlighting 
need  for  “professionalization”  of  military,  civilian  and 
contractor  personnel  performing  systems  administration 
functions 

♦  DSB  Report,  Nov  96,  Finding  #10 

♦  GAO  Report,  May  96 

♦  Recent  events  demonstrate  need  for  skilled  system 
administrators  to  maintain  configurations 

♦  Eligible  Receiver  '97 

♦  Requirement  for  DOD  SA  Licensing  Program  briefed  to 
MCEB  Sep  97 

♦  SIPRNet  SA  licensing  to  be  completed  NLT  Jan  99 


Licensing  Focus 


♦  Information  Systems 
Security  Officers/ 
Information  System 
Security  Managers 

♦  Network  Managers 

♦  Certifiers 

♦  Incident  Response 
Teams 

♦  Data  Base 
Administrators 


“Other  System 
Professionals” 


4 
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DOD  Notional  Sys  Admin  Criteria 

(Government  Svstem-OSD) 


—  Operating  System  [ 

Microsoft  Windows  NT 

certificate 

20  working  days 

$6.000 _ 


-  Security  Features  -  1 

1NFOSEC  for  System 
Administrators  (Windows  NT) 
10  working  days 
TDY  costs 


— ^Environment] 

OSD  System  Operations 
(OJT)(local  implementation) 
10  working  days 

Time  vs  $ 


^5^ 


DOD  Notional  Sys  Admin 
C  riteria  (GCCS) 


j — cppe rating  Systernj^ 

UNIX  System  Administrator 
1 5  working  days 
$3,800 


--^ecuiityFeatures^  j 

INFOSEClorSystem 
administrators  (UNIX) 

1 0  working  days 
TDY  costs 


—  Environment 

GCCS  System  Operations 
(OJT)(local  implementation) 
10  working  days 


\/«5  $ 


System  Administrator  Licensing 

DISA  Approach 


Level  2 


.  Level  1  licensing,  AND 
.  INFOSEC  310  ( Windows  NT  Security  for 
System  Administrators),  OR  Equivalent 
(for  specific  operating  system) 

.  3+  years  experience  Z 
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|8SUe  password  AFTER  successful  compledcu  of  MM 
,s  .Lwrdocc  indoctrination 


♦ 


Vehicles  for  user  licensing 
oD,SA  1NF0SEC  Awareness 
.  rsr\n  imfoSEC  Awareness 


♦Equivalent 


CBT 

CBT 


IPMO  MISSI  ETA  Strategy 

FORTEZZA  &  CAW 


•  Apply  general  strategy 

•  Champion  products 

•  Leverage  existing  forums 

•  Rely  on  existing  infrastructure 

•  Leverage  MISSI  Life  Cycle  Support  Working  Group 

•  Transition  to  Government  “owned”  courses  w/delivery  by  existing 
training  infrastructure 

•  Develop  CBT  products  to  minimize  time  in  classroom 

•  Service/Agency 

•  Deliver  training  via  existing  infrastructure 


FORTEZZA  Installers  Course 

FORTEZZA  for  Win  3. 1 

.  Platform  (3  days):  Focus  on  applications  &  trouble  shooting 

.  Computer-based  Training  (CBT)  (9  hours) 

.  Covers  entire  course 
.  Documentation 
.  Practical  Exercises 
.  Web-sites  for  more  information 

•  MISSI  Familiarization  Video  (Exploring  MISSI)( lOmin) 

.  Standalone 

.  Insert  in  all  System  Admin  training  courses 

.  Tobyhanna  Army  Depot:  DOD  Trainer  for  FORTEZZA  Installers  Course 
.  DISA  provided  exportable  package;  NSA  provided  equipment 
.  NSA  to  ensure  “hot  line”  for  training  technical  assistance  (1-800-GO  MISSI) 

.  Cost  per  course  @  Tobyhanna  (up  to  15  students):  ~$4,500 


Approach  to  CAW  Training 


.  Start  with  NS  A  developed  course  materials 
.  CAW  4.2;  platform  course 

.  Identify  portions  suitable  for  transitioning  to  CBT/video 

.  Develop  associated  “connected”  CBT 

.  Full  interactive/multimedia  functionality  on  CD-ROM 
.  Run  on  network  or  individual  workstations  with  CD-ROM  readers 
.  Linked  to  web  site  for  training  updates 


.  Use 

.  Reduce  time  in  classroom 
.  Reference 
.  Refresher 


Summary 


Completed/nearing  completion 

Products  Sr  1^1 


Fortezza  Installer  for  Windows  3.1 
Exploring  MISSI  (video) 

DOD INFOSEC  (CD-ROM) 
Federal  INFOSEC  (CD-ROM) 

DITSCAP  (Platform) 
DITSCAP  (CD-ROM), 
IW  Glossary  (Web-based) 
CBT  Style  Guide  (Web-based) , 
TREC  (Web-based), 


Sys  Admin:  Security  Basics  for  Windows 


Sys  Admin:  Operational  Infoirmation 
Systems  Security  (CD-ROM) 
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POD  INFOSEC  ETA&P  POCs 

http://www.  disa.mil/infosec 
http://mattche.iiee.disa.mil  (.mil  &  .gov  only) 


.  Marjorie  York 
.  703-681-1  323 
.  yorkm@ncr.disa.mil 

.  George  Bieber 
.  703-681-1  324 
.  bieberg@ncr.disa.mil 

.  Joan  Pohly 

•  703-681-1  346 

•  pohlyj@ncr.disa.mil 

.  For  Products 

•  703-681-7944/1344 

•  Fax:  703-681-1  386 

•  DSN:  761-xxxx 

.  cissa@ncr.disa.mil 


